Package Explorer

APIs for retrieving structured information for a specific package version.

Get Package Version Details

get

Retrieves structured information for a specific package version. Use the optional manager query parameter to filter results by package manager ecosystem. This read-only endpoint does not provide exposure details, remediation actions, or governance execution.

Required license: Cortex Cloud Posture Management or Cortex Cloud Runtime Security with Application Security add-on.

Path parameters

namestringRequired

Name of the package to look up, as it appears in the package manager registry

Example: com.vaadin.external.google:android-json

versionstringRequired

The version of the package to look up

Example: 0.0.20131108.vaadin1

Query parameters

managerstringOptional

Optional. Filters the results to a specific package manager ecosystem (for example, NPM, YARN, MAVEN, or GRADLE). When omitted, results are returned for all ecosystems in which the package version was detected.

Example: MAVEN

Header parameters

AuthorizationstringRequired

{api_key}

Example: your_api_key_here

x-xdr-auth-idstringRequired

{api_key_id}

Example: 1

Responses

200

OK

application/json

namestringOptional

Name of the package as it appears in the package manager registry.

Example: com.vaadin.external.google:android-json

versionstringOptional

The version of the package.

Example: 0.0.20131108.vaadin1

package_typestring · enumOptional

Type of the package. OSS indicates an open-source software package; OS indicates an operating system package.

Possible values:

ecosystemstring · nullableOptional

The package manager ecosystem where this package is used (for example, NPM, YARN, MAVEN, or GRADLE). Each result represents an ecosystem where the package version was detected.

Example: MAVEN

operational_riskstring · nullableOptional

The assessed operational risk level of the package version (for example, LOW, MEDIUM, or HIGH). Returns null if no assessment is available.

Example: HIGH

get/get /public_api/appsec/v1/package_explorer/packages/{name}/versions/{version}

GET /get /public_api/appsec/v1/package_explorer/packages/{name}/versions/{version} HTTP/1.1
Host: api-yourfqdn
Authorization: your_api_key_here
x-xdr-auth-id: 1
Accept: */*

200

OK

{
  "name": "com.vaadin.external.google:android-json",
  "version": "0.0.20131108.vaadin1",
  "package_type": "OSS",
  "ecosystem": "MAVEN",
  "operational_risk": "HIGH",
  "used_in": {
    "code": 9,
    "runtime": 2,
    "deploy": 1
  },
  "vulnerabilities": {
    "critical": 3,
    "high": 0,
    "medium": 0,
    "low": 0,
    "info": 0
  }
}